3707 matches found
CVE-2023-36893 Microsoft Outlook Spoofing Vulnerability
...
Description of the security update for Outlook 2016: August 8, 2023 (KB5002459)
None None...
End of support for Office 2016 and Office 2019
None None...
Description of the security update for Outlook 2013: August 8, 2023 (KB5002449)
Description of the security update for Outlook 2013: August 8, 2023 KB5002449 Summary This security update resolves a Microsoft Outlook spoofing vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-36893. Note: To apply this security...
Microsoft Outlook Remote Code Execution Vulnerability
...
Microsoft Outlook Spoofing Vulnerability
...
Microsoft Outlook 安全漏洞
Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. Microsoft Outlook has a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...
Microsoft Outlook 安全漏洞
Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. The Microsoft Outlook remote code execution vulnerability can be exploited by an attacker to execute arbitrary code on the system...
PT-2023-4301 · Microsoft · Outlook +1
Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Outlook, which can be exploited to execute arbitrary code. This allows remote attackers to affect the system. No...
PT-2023-4299 · Microsoft · Outlook
Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Microsoft Outlook email client. Exploitation of this issue may allow a remote...
Security Updates for Outlook (August 2023)
The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2023-36893...
PT-2023-4373 · Microsoft · Windows Mshtml Platform +2
Name of the Vulnerable Software and Affected Versions: Windows HTML Platforms affected versions not specified Description: A security-feature bypass vulnerability in the Windows HTML Platforms allows attackers to affect the system. The issue is related to errors in privilege management...
Microsoft Patch Tuesday July 2023: Vulristics improvements, Office RCE, SFB SmartScreen and Outlook, EoP MSHTML and ERS, other RCEs
Microsoft Patch Tuesday July 2023: Vulristics improvements, Office RCE, SFB SmartScreen and Outlook, EoP MSHTML and ERS, other RCEs. Hello everyone! This episode will be about Microsoft Patch Tuesday for July 2023, including vulnerabilities that were added between June and July Patch Tuesdays...
The vulnerability of the Microsoft Outlook email client, related to insufficient validation of input data, allows attackers to circumvent existing security restrictions.
The vulnerability of the Microsoft Outlook email client is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions remotely...
Azure AD Token Forging Technique in Microsoft Attack Extends Beyond Outlook, Wiz Reports
The recent attack against Microsoft's email infrastructure by a Chinese nation-state actor referred to as Storm-0558 is said to have a broader scope than previously thought. According to cloud security company Wiz, the inactive Microsoft account MSA consumer signing key used to forge Azure Active...
Microsoft Office 365 Version 18.2305.1222.0 - Elevation of Privilege / Remote Code Execution
Title: Microsoft Office 365 Version 18.2305.1222.0 - Elevation of Privilege + RCE. Author: nu11secur1ty Vendor: https://www.microsoft.com/ Software: https://www.microsoft.com/en-us/microsoft-365/microsoft-office Reference: https://portswigger.net/web-security/access-control CVE-2023-33148...
Upmoutlookhook64.dll error launching a Published Desktop session
Error "C:\Program Files\Citrix\User Profile Manager\upmoutlookhook64.dll is either not designed to run on Windows or it contains an error" when launching Outlook from a Published Desktop...
Microsoft Office 365 Version 18.2305.1222.0 - Elevation of Privilege + RCE.
Title: Microsoft Office 365 Version 18.2305.1222.0 - Elevation of Privilege + RCE. Author: nu11secur1ty Date: 07.18.2023 Vendor: https://www.microsoft.com/ Software: https://www.microsoft.com/en-us/microsoft-365/microsoft-office Reference: https://portswigger.net/web-security/access-control...
Comprehensive analysis of initial attack samples exploiting CVE-2023-23397 vulnerability
On March 14, 2023, Microsoft published a blogpost describing an Outlook Client Elevation of Privilege Vulnerability CVSS: 9.8 CRITICAL. The publication generated a lot of activity among white, grey and black hat researchers, as well as lots of publications and tweets about the vulnerability and i...
Microsoft validation error allowed state actor to access user email of government agencies and others
Microsoft is getting criticized for the way in which it handled a serious security incident that allowed a suspected Chinese espionage group to access user email from approximately 25 organizations, including government agencies and related consumer accounts in the public cloud. The attacks were...